1
edit
Changes
Year Zero Research/Weak Leads (view source)
Revision as of 07:15, 18 March 2008
, 07:15, 18 March 2008→Strange ._0X Jpeg's
== Steganogrophy ==
Steganogrophy: ''the process of hiding data inside other data. For example, a text file could be hidden "inside" an image or a sound file. By looking at the image, or listening to the sound, you would not know that there is extra information present.''
*[http://en.wikipedia.org/wiki/Steganography]
'''The Tools'''
*[http://www.outguess.org/stegdetect-0.4.zip Stegdetect / Stegbreak]
*[http://www.uplinklounge.com/projects/jpseek-crack/ jpseek-crack] A modified version of jphide for extracting data hidden with the normal jphide.
*[[Dictionary]] Dictionary containing all words from currently confirmed active Year Zero websites.
Currently, there is some conjecture (With backup provided by stegdetect) that there may be data hidden inside pictures on various government and resistance sites.
The following files have been flagged by Stegdetect as possibly being steg'd with jphide:(The number of stars indicate the level of certainty that hidden data exists, as reported by stegdetect)
=== 105th Airborne Brigade ===
*memories_05.jpg : "***"
*menuBkgd.jpg : "*"
*content_03.jpg : "*"
=== Consolidated Mail Systems ===
=== Another Version of the Truth ===
=== Hidden Images ===
Through brute force URL testing, 17 images have been discovered that are not referenced in the html source of the website.
They are all similar to images linked in the pages, but have small differences - which may or may not be clues.
* [[Unlinked Images]]
[[Category:World of Year Zero]]
===00000.gif theory===
There is currently a theory that this image may contain data: http://yearzero.nin.com/00000.gif
Close inspection of this image will reveal that it contains exactly 18 colors, most of which are in a pattern to the left. This pattern is reminiscent of how ASCII text, which has been converted to binary data, looks when drawn as a bitmap. Unfortunately, there are more color codes than just 2(1 & 0), and the rectangular boundaries are not all multiples of 8. It is believed, however, that there is data there. One would not post such a unique background image as a .gif unless it is necessary that the color values stayed clean.
Another interesting detail when looking at the color codes is that some of them correspond to the numbers of the images hidden on the yearzero minisite. Below is a list of the color codes used in the 00000.gif image, followed by a list of the image numbers.
Color Codes in decimal: <br>
0,0,0<br>
4,2,1<br>
0,5,0<br>
4,4,2<br>
6,2,6<br>
7,7,1<br>
9,6,7<br>
0,14,1<br>
9,13,0<br>
22,12,1<br>
2,25,0<br>
22,24,0<br>
9,35,6<br>
29,33,60<br>
39,39,37<br>
51,52,50<br>
224,224,223<br>
255,255,255<br>
Image Numbers:
[http://yearzero.nin.com/img/03.html 03], [http://yearzero.nin.com/img/07.html 07], [http://yearzero.nin.com/img/10.html 10], [http://yearzero.nin.com/img/12.html 12], [http://yearzero.nin.com/img/14.html 14], [http://yearzero.nin.com/img/19.html 19], [http://yearzero.nin.com/img/22.html 22], [http://yearzero.nin.com/img/25.html 25], [http://yearzero.nin.com/img/28.html 28], [http://yearzero.nin.com/img/31.html 31], [http://yearzero.nin.com/img/39.html 39], [http://yearzero.nin.com/img/86.html (86 = albumcover.jpg)]
The image numbers that are used in the color codes are: 07, 12, 14, 22, 25, 39
The image numbers that are not used in the color codes are: 03, 10, 19, 28, 31 (and 86)
The color code elements that are not in the list of images are:
0, 1, 2, 4, 5, 6, 9, 13, 24, 29, 33, 35, 37, 50, 51, 52, 60, 223, 224, 255
While this may be a somewhat weak correlation, the color codes that correlate and the ones that do not are split exactly 50/50. It seems highly unlikely that this is merely coincidental.
It is possible that this image does not use standard steganography, so the chance of it needing a password is low. It is believed that any data may be hidden in plain sight, and is probably a plaintext message of some sort. Photoshop and a working knowledge of number systems are probably the best tools in this instance.
===Strange ._0X Jpeg's===
Recently I Downloaded the Year Zero desktop wallpapers and found 8 odd jpegs that seem to be not jpegs
they are called: ._01, ._02, ._03, ._04, ._05, ._06, ._07, and ._08
so at least knowing some odd things i opened them with notepad, 1-7 have identical info but #8 is different
It is full of code and such and has Adobe Photoshop cs3 written near the top. im not sure how much of a
lead it is but I found this strange to include files that are not in a wallpaper package.
link to wallpapers http://yearzero.nin.com/wallpaper/index.html